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PATENT 

IN THE UNITED STATES PATENT AND TRADEMARK OFFICE 

In re Application of 
Hiroshi KASHIWA 

Serial No.: New Application (PCT/ JP00/03482) 
Filed: November 30, 2001 

For: DATA RECORDING MEDIUM AND DATA MANAGEMENT SYSTEM 

PRELIMINARY AMENDMENT 

Commissioner for Patents 
Washington, D.C. 20231 

Sir: 

Prior to examination of the above-identified application, 
please enter the following specification changes as noted below: 

IN THE SPECIFICATION : 

Page 10, second full paragraph, cancel and replace with: 

According to Claim 9 of the present invention, in the data 
recording medium as defined in any of Claims 1 to 8 , the content 
output management part further has a cipher processing part for 



performing an encryption processing- according -bo a prescribed 
algorithm and performs authentication by a cipher between the data 
recording medium and the recording and reproduction apparatus, and 
suppresses reproduction of the content according to the 
authentication result . 

Page 12, first and second paragraphs, cancel and replace with: 

According to Claim 11 of the present invention, in the data 
management system as defined in Claim 10, the recording and 
reproduction apparatus has plural digital output openings, the 
reproduction history management circuit further records the number 
of paths when the content is outputted in digital format 
simultaneously through plural paths, and the number of paths is 
added by the reproduction history management circuit to restrict 
the number of output times , when the content is outputted in 
digital format through the plural paths . 

According to the so- constituted data management system, in a 
recording and reproduction apparatus having plural digital output 
openings, the reproduction history management circuit records the 
number of plural paths and adds the number of paths to the number 
of output times in digital format output for restriction thereof, 

2 



whereby the number of copy times can be restricted when a 
reproduced content is digitally copied simultaneously employing 
plural digital outputs . 

Page 13, second and third full paragraphs, cancel and replace 

with : 

According to Claim 13 of the present invention, in the data 
management system as defined in Claim 12, the reproduction history 
management circuit further records the number of mismatch times of 
a result of the comparison, and when the content is reproduced, a 
previously set number of times is compared with the number of 
mismatch times held by the reproduction history management circuit, 
thereby to suppress reproduction of the content. 

According to the so-constituted data management system, the 
number of mismatch times held by the reproduction history 
management circuit is compared with a prescribed value and 
reproduction of a content is suppressed, whereby it is possible to 
warn an owner of the content of an unjustified access by one other 
than the owner, resulting in further enhancement in content 
security . 
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Page 16, first full paragraph, cancel and replace with: 



Figure 11 is a diagram illustrating a detailed process of Step 
Al when the content of the data management system according to the 
first embodiment is reproduced. 

Figure 12 is a diagram illustrating a detailed process of Step 
A2 when the content of the data management system according to the 
first embodiment is reproduced. 

Page 18, fifth full paragraph, cancel and replace with: 

Figure 31 is a diagram illustrating a detailed process of Step 
D4 as a procedure for confirming the registered personal 
information of the data management system according to the third 
embodiment . 

Page 20, seventh paragraph to Page 21, paragraph continued, 
cancel and replace with : 
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Figure 1 is a diagram illustrating a conceptual constitution 
of a disk medium 100 as a data recording medium according to a 
first embodiment of the present invention. In figure 1, numeral 90 
denotes a center hole numeral 100 denotes a disk medium such as a 
DVD -RAM composed of polycarbon, numeral 101 denotes a semiconductor 
tip (reproduction history management circuit) which includes a 
nonvolatile semiconductor tip or the like as a storage element, 
numeral 102 denotes a data area, numeral 103 denotes a clipping 
area for fixing the disk medium 100 on an after -mentioned rotation 
drive, and numeral 104 denotes a TOB (Table of contents) area where 
management information of the data area 102 on the disk medium 100 
is recorded. 

Page 22, third paragraph, to Page 24, end of line 5, cancel 
and replace with : 

The constitution of the disk medium 100 in more 
detail is as follows; the disk medium 100 comprises 
three layers as shown in figure 3(c) , in which numeral 
131 denotes a base material layer and numeral 132 
denotes a recording layer in which contents are 
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recorded. In the semiconductor tip 101, pins 133 
corresponding to the respective wiring 105 provided in 
the clipping area 103 are attached, by which the 
semiconductor tip 101 and the wiring 105 are connected 
so that power, a signal and the like are supplied to 
the semiconductor tip 101 as described above. 

Its manufacturing method is as follows; the 
semiconductor tip 101 to which the pins 133 are 
attached is embedded in the base material layer 131 
having a concave portion in a part of the clipping 
area 103. Then, the recording layers 132 are applied 
to both sides and the wiring 105 corresponding to 
respective pins 133 is formed in a metal pattern on 
the surface from which the pins 133 are protruding by 
masking or the like. While the disk medium 100 
comprises three layers here, it may also comprise two 
layers with the recording medium layer on only one 
s ide . 

With the above-described constitution, when the disk medium 
100 is mounted on the tray 106 as shown in figure 3(a), the tray 
106 is housed into the recording and reproduction apparatus 200, 
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the disk medium 100 is clamped down from above and beneath by the 
clipping 107 and the spindle motor 109 and is rotated by the 
spindle motor 109, the data area 102 of the disk medium 100 is 
accessed by the optical pickup 208, and data to be 
recorded/ reproduced are communicated to an after-mentioned cipher 
part. When the clipping 107 fixes the disk medium 100, the wiring 
arranged on the disk medium 100 comes in contact therewith, whereby 
the recording and reproduction apparatus 200 and the semiconductor 
tip 101 embedded in the disk medium 100 can perform data 
communication through the data lines . 



Page 27, first full paragraph, cancel and replace with: 



In Step A203, the CPU 203 transfers the title and the-number- 
of-digital-output-restriction-times information to the medium 
management part 202 based on the information set in the user 
setting part 206, and a random number is generated from the random 
number part 211 to create an encryption key {key A) . In Step A204, 
the program A as analog data is inputted to the A/D converter 209, 
where it is converted into digital data, is further transmitted to 
the signal processing part 201, where the program A is made into a 
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record format, is transmitted to the cipher part 210, where the 
program A is encrypted employing the key A, and is transmitted to 
the optical pickup 208, and the encrypted program A is recorded in 
a vacant area of the data area 102 on the disk medium 100 and a 
title of the recorded data and arrangement of data in the disk 
medium 100 are recorded in the TOB area 104 from the optical pickup 
208 by a control of the CPU 203. 

Page 28, fourth full paragraph, cancel and replace with: 

In this way, writing of a content onto the disk medium 100 is 
performed . 

Page 29, second full paragraph, cancel and replace with: 

In Step A403, the CPU 203 transmits a start command indicating 
reproduction start, the title to be reproduced, and the information 
of presence or absence of digital output from the medium management 
part 202 to the semiconductor tip 101 through the data lines. 
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Page 30, third full paragraph to Page 31, paragraph continued, 
cancel and replace with: 

Here, the set information in Step A402 cannot be modified 
after the end of Step A403, and thus the set information is erased 
and setting is reattempted from Step A402 in case of modification. 

Therefore, even when digital output is set to "absence" in Step 
A402 and is modified to "presence" after the end of Step A402, 
unjustified digital output of a content which cannot be digitally 
outputted can be prevented by StepA407 . 

Page 49, first paragraph, cancel and replace with: 

Figure 36 is a block diagram illustrating a constitution of a 
semiconductor tip 10 Id in the fifth embodiment, in which numeral 
119 denotes a cipher part of a recoding and reproduction apparatus 
400 in the fifth embodiment shown in figure 37, which has the same 
cipher algorithm as that of the cipher part 210, numeral 120 
denotes a random number part which generates a random number, and 
numeral 121 denotes a key box part as a set of key arrangement 
employed in the cipher part 119. Other parts are the same as those 
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shown in figure 4 , and their descriptions will be omitted here . 
Figure 37 is a block diagram of a recording and reproduction 
apparatus 400 in the fifth embodiment, in which numeral 214 denotes 
a key box part having the same function as that of the key box part 
121 included in the semiconductor tip lOld mounted on the disk 
medium 100 . The same reference numerals as those shown in figure 5 
denote the same or corresponding parts . 

Page 53, third full paragraph, cancel and replace with: 

While in the first embodiment, the semiconductor tip 101 which 
the pins 133 is connected to is embedded in the base material layer 
131 with a concave portion and both sides thereof are applied with 
the recording layers 132, thereby to manufacture the disk medium 
100, it is also possible that only a part of the clipping area 103 
having the semiconductor tip 101 and the wiring 105 is created 
separately and is embedded in the disk medium 100, which has the 
outside of the clipping area 103 created conventionally. 

Page 54, second paragraph, cancel and replace with: 
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Further, while a password is held in the disk medium 100 as 
personal information so as to be confirmed in the third embodiment, 
or a cipher processing is employed to perform authentication 
between the disk medium 100 and the recording and reproduction 
apparatus 400 in the fifth embodiment, it is also possible that an 
algorithm for authentication is held in a medium such as an IC 
card, which is employed instead of a key at content reproduction, 
thereby to prevent unjustified use. 

IN THE CLAIMS : 

Please amend claims 3, 5, 7, 9, 11, 12 and 14 as follows: 
3 . (Amended) The data recording medium as defined in Claim 
1 , wherein 

the content is encrypted employing a key and is recorded on 
the data recording medium, and 

the reproduction history management circuit comprises: a 
storage part for storing a decryption key for decrypting the 
content recorded on the data recording medium; and 

a content output management part for restricting the number of 
output times of the decrypted content in digital format when a 
content is reproduced from the data recording medium. 
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5. (Amended) The data recording medium as defined in Claim 
3 , wherein 

when the content is outputted in digital format, the content 
output management part updates and records its number of times, 
compares the number of times with the previously set number of 
restriction times, and decides not to output the content in digital 
format when the number of output times of the content in digital 
format exceeds the number of restriction times . 

7 . (Amended) The data recording medium as defined in Claim 
1 i wherein 

the content output management part has personal information 
storage part for storing personal information for authenticating an 
owner of the data recording medium and compares externally inputted 
information with the personal information and permits reproduction 
of the content only when the comparison results in matching, at 
reproduction of the content. 

9. (Amended) The data recording medium as defined in Claim 



12 



1 , wherein 

the content output management part further has a cipher 
processing part for performing an encryption processing according 
to a prescribed algorithm and performs authentication by a cipher 
between the data recording medium and the recording and 
reproduction apparatus, and suppresses reproduction of the content 
according to the authentication result. 

11 . (Amended) The data management system as defined in Claim 
10, wherein 

the recording and reproduction apparatus has plural digital 
output openings , 

the reproduction history management circuit further records 
the number of paths when the content is outputted in digital format 
simultaneously through plural paths, and 

the number of paths is added by the reproduction history 
management circuit to restrict the number of output times, when the 
content is outputted in digital format through the plural paths . 

12 . (Amended) The data management system as defined in Claim 
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10, wherein 

the reproduction history management circuit further records 
personal information for recognizing an owner of the data recording 
medium, and 

when the content is reproduced, externally inputted 
information is compared with the personal information held by the 
reproduction history management circuit, and reproduction of the 
content is suppressed according to the comparison result. 

14 . (Amended) The data management system as defined in Claim 
10 , wherein 

the reproduction history management circuit subjects a cipher 
key to an encryption processing according to a prescribed 
algorithm, 

the medium management part subjects the cipher key to an 
encryption processing by the same algorithm as that of the 
reproduction history management circuit, and 

when the content is reproduced, authentication is performed 
between the data recording medium and the recording and 
reproduction apparatus employing the encryption processing by the 
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reproduction history management circuit and. the encryption 
processing of the medium management part, and whether or not the 
content can be decrypted is judged according to the authentication 
result. 
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REMARKS 

Claims 1-14, as amended, remain herein. 

This Preliminary Amendment is to conform the application 
Article 34 amendments to the specification and claims and to 
eliminate multiply dependent claims from the above -identified 
application . 

Examination of this application on its merits is respectfully 
requested. 



Respectfully submitted, 
PARKHURST & WENDEL, L.L.P. 



November 30, 2001 




Date Roger W. Parkhurst 

Registration No. 25,177 

Attachment : 

Specification and Claims Mark Up 

RWP/ame 

Attorney Docket No. HYAE:128 

PARKHURST & WENDEL, L.L.P. 
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which compares the externally inputted information with the 
personal information and stores the numfcer of mismatch times 
when the comparison successively results in mismatch, and 
suppresses reproduction of the consent as well as informs the 
outside of the mismatch when/the number of mismatch times 
exceeds a prescribed value. / 

According to the so-constituted data recording medium, the 
content output management part has the-number-of -mismatch-times 
holding part and .Stores the number of mismatch times as a 
result of comparing externally inputted information with 
personal information and suppresses output of a content as well 
as inform/ the outside of the mismatch when the number of 
mismatch times exceeds a prescribed value, thereby preventing 
unspecified people other than an owner of the data recording 
rrtedium from reproducing the content without authorization. 

According to Claim 9 of the present invention, in the data 
j gtoring recording m edium as defined in any of Claims 1 to 8 , 
the content output management part further has a cipher 
processing part for performing an encryption processing 
according to a prescribed algorithm and performs authentication 
by a cipher between the data recording medium and the recording 
and reproduction apparatus, and suppresses reproduction of the 
content according to the authentication result. 

According to the so-consJ><f tut ed data recording medium, the 
cipher processing part ig'provided in the reproduction history 
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According to Claim 11 of the present invention, in the 
data management system as defined in Claim 10, the recording 
and reproduction apparatus has plural digital output openings, 
the reproduction history management circuit further records the 
number of paths when the content is outputted in digital format 
simultaneously through plural paths, and the number of paths is 
added by the reproduction history management circuit to 
restrict the number of output times, when the content is 
outputted in digital format through the plural paths. 

^ft — According to the so-constituted data management system, 
in a recording and reproduction apparatus having plural digital 
output openings, the reproduction history management circuit 
records the number of plural paths and adds the number of paths 
to the number of output times in digital format output for 
restriction thereof, whereby the number of copy times can be 
restricted when a reproduced content is digitally copied 
simultaneously employing plural digital outputs. 

According to Claim 12 of the present invention, in the 
data management system as defined in Claim 10 or 11, the 
reproduction history management circuit further records 
personal information for recognising an owner of the data 
recording medium, and when/ the content is reproduced, 
externally inputted information is compared with the personal 
information held by the /reproduction history management circuit 
and reproduction of Jttxe content is suppressed according to the 
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comparison result. 

According to the so-constituted data/management system, 
personal information held by the/ reproduction history 
management circuit and externally inputted information are 
compared and reproduction of a/content is suppressed according 
to its result, whereby an >em justified copy by one other than an 
owner of this cont/nt can be prevented, resulting in 
enhancement in content security. 

According to Claim 13 of the present invention, in the 
data management system as defined in Claim 12, the reproduction 
history management circuit further records the number of 
mismatch times of a result of the comparison, and when the 
content is reproduced, a previously set number of times is 
compared with the number of mismatch times held by the 
reproduction history management circuit, thereby to suppress 
reproduction of the content. 

■fen— According to the so-constituted data management system, 
the number of mismatch times held by the reproduction history 
management circuit is compared with a prescribed value and 
reproduction of a content is suppressed, whereby it is possible 
to warn an owner of the content of an unjustified access by one 
other than the owner, resulting in further enhancement in 
content security. 

According to Claim 14 of y't'he present invention, in the 
data management system as defined in any of Claims 10 to 13, 
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Step Z3 at recording of they'&ata management system according to 
the first embodiment. X 

Figure 10 is a diagram for explaining an overall operation 
when the content yfecorded on the disk medium according to the 
first embodijrfent is reproduced by the recording and 
reproductipm apparatus . 

Figure 11 is a diagram illustrating a detailed process of 
Step AS — Alwhen the content of the data management system 
according to the first embodiment is reproduced. 

Figure 12 is a diagram illustrating a detailed process of 

Step A2 when the content of the data management system 
according to the first embodiment is reproduced. 

Figure 13 is a diagram illustrating a detailed process of 
Step A3 when the content of the data management system 
according to the first embodiment is reproduced/ 

Figure 14 is a diagram illustrating a detailed process of 
Step A4 when the content of the data management system 
according to the first embodiment is reproduced. 

Figure 15 is a block diagram /schematically illustrating a 
constitution of a semiconductor/tip mounted on a disk medium as 
a data recording medium according to a second embodiment. 

Figure 16 is a hwck diagram illustrating an overall 
constitution of a d^rta management system employing the data 
recording medium Recording to the second embodiment. 

Figure 1/ is a diagram for explaining an overall operation 



18 



Pid process of 
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>rding medium 
ed process of 
ered personal 
rding to the 

Figure 30 is a diagram illustrating a detailed process of 
Step Q4— D5as a procedure for confirming the registered personal 
information of the data management system according to the 
third embodiment. 

Figure 31 is a diagram illustrating a detailed process of 
Step D4 as a procedure for confirming the registered personal 
information of /the data management system according to the 
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(Embodiment 1) 

Figure 1 is a diagram illustrating a conceptual 
constitution of a disk medium 100 as a data recording medium 
according to a first embodiment of the present invention. In 
figure 1, numeral 90 denotes a center hole, numeral 100 denotes 
a disk medium such as a DVD-RAM composed of polycarbon, numeral 
101 denotes a semiconductor tip (reproduction history- 
management circuit) which includes a nonvolatile semiconductor 
tip or the like as a storage element, numeral 102 denotes a 
data area, numeral 103 denotes a clipping area for fixing the 
disk medium 100 on an after-mentioned rotation drive, and 
numeral 104 denotes a TOB (Table of contents) area where 
management information of the recorded — data area 102 on the 
disk medium 100 is recorded. 

When there may be plural semiconductor tips, for example, 
when there are two semiconductor tips, Jnriey may be arranged to 
be symmetrized with the center hole 9)0 in the center, thereby 
to achieve a balance, while there ±p one here. 

Figure 2 is a diagram exemplifying arrangement of wires 
provided in the disk medium .for performing electrical signal 
connection with the semiconductor tip 101 mounted on the disk 
medium 100. In the figure', numeral 105 denotes wiring provided 
in the clipping area 103%. which comprises a data line as a two- 
way signal line, a po^er line for supplying power, a clock line 
for supplying a cloafc when the semiconductor tip 101 is driven, 
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a pit formed in the data area 102 of the disk medium 

The constitution of the disk medium 100 in more detail is 
as follows; the disk medium 100 comprises three layers as shown 
in figure 3 (c) , in which numeral 131 denotes a base material 
layer and numeral 132 denotes a recording layer in which 
contents are recorded. In the semiconductor tip 101, pins 133 
corresponding to the respective wiring 105 provided in the 
clipping area 103 are attached, by which the semiconductor tip 
101 and the wiring 105 are connected so that power, a signal 
and the like are supplied to the semiconductor tip 101 as 
described above. 

Its manufacturing method is as follows; the semiconductor 
tip 4r0^101 to which the pins 133 are attached is embedded in 
the base material layer 131 having a concave portion in a part 
of the clipping area 103. Then, the recording layers 132 are 
applied to both sides and the wiring 105 corresponding to 
respective pins 133 is formed in a metal pattern on the surface 
from which the pins 133 are protruding by masking or the like. 
While the disk medium 100 comprises three layers here, it may 
also comprise two layers with the recording medium layer • on 
only one side. 

With the above-described constitution, when the disk 
medium 100 is mounted on the tray 106 as shown in figure 3(a) , 
the tray 106 is housed into the recording and reproduction 
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apparatus 200, the disk medium 100 is clamped down from above 
and beneath by the clipping 107 and the spindle motor 109 and 
is rotated by the spindle motor 109, the data area 102 of the 
disk medium 100 is accessed by the optical pickup 208, and data 
to be recorded/reproduced are communicated to an after- 
mentioned cipher part. When the clipping 107 fixes the disk 
medium 100, the wiring arranged on the disk medium 100 comes in 
contact therewith, whereby the recording and reproduction 
apparatus 200 and the semiconductor tip 101 embedded in the 
disk medium 100 can perform data communication through the data 
lines . 

Next, an operation will be described. 

First, a recording operation /will be described with 
reference to figures 4 to 9 . / 

When a content is encrypted [to be recorded onto the disk 
medium 100, the semiconductor tip 101 has an I/O 100 as a two- 
way communication port, a CPU/ 111 (content output management 
part) which controls a data/ signal and a control signal and 
performs arithmetic operations, and a storage part 112 composed 
of a nonvolatile memory sfach as an EPROM and an EE PROM, which 
holds management information of recorded data, as shown in 
figure 4. / 

Table 1 shows cc/ntents of the information held in the 
storage part 112, i/t which numeral 114 denotes a title, numeral 
115 denotes a decryption key part holding a decryption key in 
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the like on the disk medium 100, by tfie optical pickup 208 
accessing the TOB area 104 on the di^k media 104, and displays 
the title on the display part 207 ./ 

Next, in Step A202, a titl/of content data to be recorded 
by a user, the -numb er^of -digital-output-restriction-times 
information, presence or/absence of encryption of the content 
are set into the user /Setting part 206 (here, title: program A, 
the-number-of-digi1?al-output-restriction-times information: 5, 
and encryption: /presence) . 

In Step A203, the CPU 203 transfers the title and the- 
number-of-digital-output-restriction-times information to the 
medium management part 202 based on the information set in the 
user setting part 206, and a random number is generated from 
the random number part 211 to create an encryption key (key A) . 
In Step A204, the program A as analog data is inputted to the 
A/D converter 209, where it is converted into digital data, is 
further transmitted to the signal processing part 201, where 
the program A is made into a record format, is transmitted to 
the cipher part 210, where the program A is encrypted employing 
the key A, and is transmitted to the optical pickup 208, and 
the encrypted program A is recorded in a vacant area of the 
recording data area 102 on the disk medium 100 and a title of 
the recorded data and arrangement of data in the disk medium 
100 are recorded in the TOB area 104 from the optical pickup 
208 by a control of the CPU 203. 
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In Step A205, the medium management part 202/ transmits a 
registration command, the title (program A) , / the-number-of- 
digital-output-restriction-times information /5) , and the key A 
to the semiconductor tip 101 through the dafca lines. 

In figure 8 as a process in Step/z2 , in Step A208, the 
registration command, the title (program A) , the-number-of- 
digital-output-restriction-times information (5) , and the key A 
are received by the I/O 110. / 

In Step A209, by the registration command received by the 
I/O 110, the CPU 111 transmits the received information in Step 
A208 to the storage par£ 112, where the information is stored 
as shown in Table 1 . / 

In Step A210/ an end of communication is transmitted to 
the medium management part 202 after recording. 

In fig/re 9 as a process in Step Z3, the end of 
communication is received in step A213 and the operation for 
recording setting information onto the disk medium is ended. 

In this way, writing of a content onto the disk medium 100 
is performed. 

Next, an operation for reproducing tKe disk medium 100 on 
which a content is recorded being encrypted in the recording 
and reproduction apparatus 200 will Jbe described with reference 
to figures 10 to 14 . / 

As shown in figure 10, s/eps Al and A3 are performed in 
the recording and reproduction apparatus 200 and Steps A2 and 
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A4 are performed in the semiconductor tip 101 y and they are 
performed in the order of Steps A1-A4 . / 

First, in figure 11 as a process in Step Al , in Step A401, 
when the disk medium 100 is arranged in the recording and 
reproduction apparatus 200 as show! in figure 3, the CPU 203 
detects a title and arrangement/of data recorded by a user, a 
vacant area, and the like yon the disk medium 100, by the 
optical pickup 208 accessing the TOB area 104 on the disk media 
100, and displays the feat le on the display part 207. 

Next, in Step/A4 02 , presence or absence of output of a 
title to be repr/duced by a user from the digital interface 204 
to the external recording and reproduction apparatus 212 
through t#e connection cable 213 is set into the CPU 203 
through/the user setting part 206 (title: program A, digital 
out©«t: presence). 

In Step A403, the CPU 203 transmits a start command 
indicating reproduction start, the title to be reproduced, and 
the information of presence or absence of digital output from 
the medium management part 202 to the semiconductor tip 101 
through the data lines 108 and 105 . 

In figure 12 as a process in S/t:ep A2, the semiconductor 
tip 101 receives the information sset in Step A402 at the I/O 
110 and the CPU 111 confirms ttfe start command in Step A406, 
and presence or absence of digital output is confirmed in Step 
A4 07. When there is no digital output (no), the processing 
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A402 is prompted visually or ^irfally in the display part 207. 

Here, the set information in Step A402 cannot be modified 
after the end of Step A403, and thus the set information is 
erased and setting is reattempted from Step A402 in case of 
modification. Therefore, even when digital output is set to 
"absence" in Step A402 and is modified to "presence" after the 
end of Step A402, unjustified digital output of a content which 
cannot be digitally outputted can be prevented by Step A408 A407 . 

On the other hand, in case of no reproduction non- 
permission command (no) in Step A415, the processing proceeds 
to Step A417, where presence or absence of digital output set 
in Step A402 is confirmed, and in case of "presence" (yes) , the 
processing proceeds to Step A418, where a content of the title 
(program A) set in Step A402 is reproduced employing the 
decryption key (key A) received in Step/A414 and decrypted data 
are outputted from the digital interface 204 in digital format, 
and a reproduction end is transmitted to the semiconductor tip 
101 when the reproduction is endeo in Step A419. 

In Step A417, when presence of absence of digital output 
set in Step A402 is confirmed and it is "absence" (no) , the 
processing proceeds to Step S420, where the content of the 
title (program A) set ir/ Step A402 is decrypted employing the 
decryption key (key A) /received in Step S414 and is reproduced 
in analog format from/ the D/A converter 205. 

In figure 14/ as a process in Step A4, when the 
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be described. In the flftM embodiment, an authenticating 
operation employing a yOpher is performed in the above- 
described respectiv^embodiments . Here, a description will be 
given exemplifying a case where this embodiment is applied in 
the first embodiment . 

Figure 36 is a block diagram illustrating a constitution 
of a semiconductor tip lOld in the fifth embodiment, in which 
numeral 119 denotes a cipher part of the — a recoding and 
reproduction apparatus— 2-9-9 - 4 00 in the fifth embodiment shown in 
figure 37 , which has the same cipher algorithm as that of the 
cipher part 210, numeral 120 denotes a random number part which 
generates a random number, and numeral 121 denotes a key box 
part as a set of key arrangement employed in the cipher part 
119. Other parts are the same as those shown in figure 4, and 
their descriptions will be omitted here. Figure 37 is a block 
diagram of a recording and reproduction apparatus 400 in the 
fifth embodiment, in which numeral 214 denotes a key box part 
having the same function as that of the key box part 121 
included in the semiconductor tip lOld mounted on the disk 
medium 100. The same reference numerals as those shown in 
figure 5 denote the same or corresponding parts. 

Table 2 shows inf ormatior/held in the key box part 121 and 
the key box part 214, in w^ich numeral 1700 denotes a key code 
for selecting a key aofl numeral 1701 denotes a key selected 
according to the key/code 1700. 
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Gl>2 6. 

In figure 43 as a process in Step G5, the contimj&tion 
command or the transmission end is received in Step j£1531, it 
is confirmed whether the received information is a/continuation 
command or not in Step G1532, and in case wher/this is judged 
not to be a continuation command (no) , the/processing proceeds 
to Step G1534, where communication ended, while in case 

where this is judged to be a ^continuation command, the 
processing proceeds to Step /G1533, where a reproduction 
operation is performed. / 

As described above/ according to the fifth embodiment, a 
cipher processing function is provided with the semiconductor 
tip lOld of the ifisk medium 100 and authentication is performed 
employing a cipher, whereby reproduction of the disk medium 100 
is permi/tfted only in the environment enabling cipher 
communication, resulting in further enhancement in content 
security. 

Further, a transmission key for encrypting and 
transmitting data required for a recording or reproduction 
operation is generated differently for each authentication, 
employing data j/ communication process including random number 
data, whereb/a high-security key can be created. 

While in the first embodiment, the semiconductor tip 101 
which the pins 133 is connected to is embedded in the base 
material part layer 131 with a concave portion and both sides 
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thereof are applied with the recording layers 132, thereby to 
manufacture the disk medium 100, it is also possible that only 
a part of the clipping area 103 having the semiconductor tip 
101 and the wiring 105 is created separately and is embedded in 
the disk medium 100, which has the outside of the clipping area 
103 created conventionally. 

Further, while in the first embodiment, the wiring 105 is 
employed in the clipping area 103 s?T as to supply power or a 
signal to the semiconductor tip/2m mounted on the disk medium 
100, it is also possible th^ft a solar battery panel is mounted 
on the clipping area ^3 to supply power to the semiconductor 
tip 101 as well j£s to irradiate a semiconductor laser to a 
specified portion of the solar battery panel, thereby 
transferring a signal. 

Further, while a password is held in the disk medium 100 
as personal information so as to be confirmed in the third 
embodiment, or a cipher processing is employed to perform 
authentication between the disk medium 100 and the recording 
and reproduction apparatus 400 in the fifth embodiment, it is 
also possible that an algorithm for authentication is held in a 
medium such as an IC card, which is employed instead of a key 
at content reproduction, thereby to prevent unjustified use. 



APPLICABILITY IN INI 



As 




a data recording medium and data 
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CLAIMS 

1. A data recording medium for/content recording or 
reproduction including: / 

a reproduction history management circuit which records 
copyright protectiop^inf ormation and manages reproduction and 
output of a con^nt referring to the copyright protection 
information/at content reproduction. 



2. The data recording medium as defined in Claim 1, 

the data recording medium is made of a recording layer for 
recording a content and a base/material layer, wherein 

the reproduction history management circuit is embedded in 
a part of the base material layer in a clipping area in the 
data recording mediujrf, and 

the clipping^ area is an area where the data recording 
medium is fix^d with respect to a rotation drive for rotating 
the data recording medium. 

3. The data recording medium as defined in Claim 1 or 2 , 
wherein 

the content is encrypted employing a key and is recorded 
on the data recording medium, and 

the reproduction history management circuit comprises: a 
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storage part for storing a decryption key for decrypting the 
content recorded on the data recording medium; and 

a content output management part for restricting the 
number of output times of the decrypted content in digital 
format when a content is reproduced from the data recording 
medium . 

4. The data recording medium as defined in Claim 3, wherein 
the content recorded on tWaata recording medium is 

encrypted employing a key different in unit of the title or the 
arbitrary data size, amy 

the content output management part has a decryption key 
for each unit of/content encryption and restricts the number of 
output times/of the content in digital format in unit of the 
title or /he arbitrary data size. 

5. The data recording medium as defined in Claim 3 or 4 , 
wherein 

when the content is outputted in digital format, the 
content output management part updates and records its number 
of times, compares the number of times with the previously set 
number of restriction times, and decides not to output the 
content in digital format when the number of output times of 
the content in digital format exceeds the number of restriction 
times . 
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6. The data recording medium as defined in Claim 5, wherein 
when the content is outpu^ted in digital format 

simultaneously through plural paths, the content output 
management part has an >6utput path number storage part for 
storing the number /SI paths, and adds the number of paths 
stored in the o*rtput path number storage part to count outputs 
of the contyent in digital format, when the number of output 
times of the content in digital format is counted. 

7. The data recording medium as defined in any of Claimo 1 t < 
Claim 1 , wherein 

the content output management part has personal 
information storage part for storing personal information for 
authenticating an owner of the data recording medium and 
compares externally inputted information with the personal 
information and permits reproduction of the content only when 
the comparison results in matching, at reproduction of the 
content . 

8. The data recording medium as defined Claim 7, wherein 
the content output management part has the-number-of- 

mismatch-times holding part wnich compares the externally 
inputted information wit« the personal information and stores 
the number of mismatch times when the comparison successively 
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results in mismatch, and suppresses/reproduction of the content 
as well as informs the outside/of the mismatch when the number 
of mismatch times exceeds/a prescribed value. 

9. The data recording medium as defined in any of Claimo — 1 — fee- 
8 - Claim 1 , wherein 

the content output management part further has a cipher 
processing part for performing an encryption processing 
according to a prescribed algorithm and performs authentication 
by a cipher between the data recording medium and the recording 
and reproduction apparatus, and suppresses reproduction of the 
content according to the authentication result. 



10. A data management system for managing data employing a 
data recording medium for content recording or reproduction, 
wherein / 

the data recording medium has a reproduction history 
management circuit which records copyright protection 
information and manages reproduction and output of a content 
referring to the copyright protection information at content 
reproduction, y 

the recording and reproduction apparatus has a medium 
management part whicJi is connected to the reproduction history 
management circuit and manages writing or reading of data on 
the data recprding medium, and 
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when the content is reproduced,^ encrypted content is 
decrypted by a decryption key hel<i in the reproduction history 
management circuit to be reproduced, and when it is outputted 
in digital format, the number of output times is restricted by 
the reproduction hi^ffory management circuit. 

11. The data management system as defined in Claim 10, wherein 
the recording and reproduction apparatus has plural 

digital output openings, 

the reproduction history management circuit further 
records the number of paths when the content is outputted in 
digital format simultaneously through plural paths, and 

the number of paths is added by the reproduction history 
management circuit to restrict the number of output times, when 
the content is outputted in digital format through the plural 
paths . 

12. The data management system as defined in Claim 10 or 11 , 
wherein 

the reproduction history management circuit further 
records personal information for recognizing an owner of the 
data recording medium, and 

when the content is reproduced, externally inputted 
information is compared with the personal information held by 
the reproduction history management circuit, and reproduction 
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of the content is suppressed according to the comparison result. 

13. The data management system as defined in Claim 12, wherein 
the reproduction history management circuit further 

records the number of mismatch! times of a result of the 

comparison, and 

when the content is reproduced, a previously set number of 

times is compared with the number of mismatch times held by the 

reproduction/history management circuit, thereby to suppress 

reproduction of the content. 

14 . The data management system as defined in — any — &S — Claims — 1-Q- 
te — 3r3 - Claim 10 , wherein 

the reproduction history management circuit subjects a 
cipher key to an encryption processing according to a 
prescribed algorithm, 

the medium management part subjects the cipher key to an 
encryption processing by the same algorithm as that of the 
reproduction history management circuit, and 

when the content is reproduced, authentication is 
performed between the data recording medium and the recording 
and reproduction apparatus employing the encryption processing 
by the reproduction history management circuit and the 
encryption processing of the medium management part, and 
whether or not the content can be decrypted is judged according 
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to the authentication result. 
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DESCRIPTION 

DATA RECOR D ING MEDIUM AMD DAT A MANA GEMENT SYS TEM 

TECHNICAL FIELD 

The present invention relates to a data recording medium 
and a data management system and, more particularly, to an art 
for improving copyright protection of a content for digital 
copy. 

BACKGROUND ART 

While digitalization of contents is making progress, 
copyright protection by a digital copy has become a problem 
since a digital copy has no deterioration. Therefore, there is 
proposed CGMS (Copy Generation Management System) method which 
indicates copyright protection information by four states of 
Free, Never Copy, One More Copy, and No More Copy as shown in 
figure 44. Figure 45 illustrates a reproduction apparatus 504 
which is provided with digital output that controls copyright 
protection by the CGMS method. In figure 45, numeral 500 
denotes a disk medium such as a CD-ROM and numeral 504 denotes 
a reproduction apparatus. The reproduction apparatus 504 
comprises a reproduction signal processing circuit 501 for 
processing a signal read from the disk medium employing an 
optical pickup 506 or the like, a digital interface 503 for 
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outputting a reproduction signal, and a CPU 502 for controlling 
operations of the reproduction signal processing circuit 501 
and digital interface 503. 

Hereinafter, a description will be given of a control of 
digital output of a content employing the CGMS method in the 
conventional reproduction apparatus 504 which is provided with 
digital output that controls copyright protection. 

First, CGMS information added to the disk medium 500 is 
transferred from the reproduction signal processing circuit 501 
to the CPU 502. The CPU 502 controls digital output of 
reproduction data of the disk medium 500 from the digital 
interface 503 according to the CGMS information as follows. 

1. When the CGMS is "Free", output of the reproduction 
data from the digital interface 5 03 is always admitted. 

2. When the CGMS is "Never Copy", output of the 
reproduction data from the digital interface 503 is not 
admitted . 

3. When the CGMS is "One More Copy", output of the 
reproduction data from the digital interface 503 is admitted 
only once. 

4. When the CGMS is "No More Copy", output of the 
reproduction data from the digital interface 5 03 is not 
admitted. 

Here, in a case where a recording apparatus is connected 
to the digital interface 503 and data of "One More Copy" are 
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outputted to the recording apparatus, the information of "One 
More Copy" is rewritten to that of "No More Copy" on the side 
of the recording apparatus and data are recorded and managed 
onto the recording medium anew. 

Further, in view of the fact that a copy from an original 
disk medium is infinitely possible when the CGMS information of 
a content is "One More Copy" in the above-described 
constitution, there may be also a method in which a management 
information area 505 where information for controlling the 
number of copy times can be recorded on the surface of the disk 
medium 500 is provided, the reproduction apparatus is 
constituted so as to prohibit copying when the information 
reached a prescribed value, the number of copy times is 
rewritten every time a content of "One More Copy" is copied, 
and a subsequent copy from the original disk medium is 
suppressed when the number of copy times matches the prescribed 
value. 

Further, Japanese Published Patent Application No. Hei. 7- 
161172 discloses a data recording medium in which recording can 
be performed with high-security and user-friendliness when 
various data are recorded onto a recording medium such as a 
disk and a tape. This data recording medium is constituted 
such that a recording medium on which data are recorded is 
stored in a chassis and an IC is attached to a prescribed point 
of the chassis. A startup program and encrypted data are 
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recorded on the recording medium, a encryption program and 
password data of the recorded data are stored in a memory in 
the IC, and when the recorded data are read or data are written 
into the recording medium, an inputted password is supplied to 
the IC to be collated with the password stored in the memory in 
the IC by an arithmetic operation means, and encrypted data 
stored in the recording medium are decrypted or data to be 
recorded onto the recording medium are encrypted according to 
the encryption program stored in the memory in the IC when the 
passwords match, thereby enabling high-security and user- 
friendly recording with no complicated keyword management by 
the IC including an encrypted program, which is provided in the 
chassis . 

Though a content duplicated from a conventional recording 
medium having the CGMS information is subjected to rewriting of 
its CGMS information at recording onto a recording medium so 
that the content is not further duplicated, the number of 
digital copy times onto the recording medium can not be 
restricted when the CGMS information is "One More Copy" in the 
above-described conventional constitution, whereby it is 
impossible to effectively prevent copyright piracy by a digital 
copy of a content. 

Further, even when a rewritable area for managing the 
number of copy times is provided in a prescribed area of a disk 
medium, it is impossible to effectively prevent copyright 
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piracy by a so-called stamp copy, by which a pit shape formed 
on the disk medium is physically copied. 

Further, in the data recording medium disclosed in the 
Japanese Published Patent Application No. Hei. 7-161172, an 
encryption program of an encrypted content recorded on the data 
recording medium is held in the IC which is attached to the 
chassis storing the data recording medium, whereby the data 
recording medium may be copied by employing the encryption 
program in the IC, that is, the chassis attached with the IC 
and the data recording medium body are separated to be employed 
for a illegal copy. 

The present invention is made to solve the above-mentioned 
conventional problems and has for its object to provide high- 
security copyright management in a disk medium. 

DISCLOSURE OF THE INVENTION 

According to Claim 1 of the present invention, a data 
recording medium for content recording or reproduction 
including: a reproduction history management circuit which 
records copyright protection information and manages 
reproduction and output of a content referring to the copyright 
protection information at content reproduction. 

According to the so-constituted data recording medium, the 
reproduction history management circuit is provided in the data 
recording medium, thereby managing reproduction of a content on 
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its own and preventing unrestricted duplication employing a 
recording medium as a copy source, resulting in effective 
prevention of copy right piracy. 

According to Claim 2 of the present invention, the data 
recording medium as defined in Claim 1 is made of a recording 
layer for recording a content and a base material layer, the 
reproduction history management circuit is embedded in a part 
of the base material layer in a clipping area in the data 
recording medium, and the clipping area is an area where the 
data recording medium is fixed with respect to a rotation drive 
for rotating the data recording medium. 

According to the so-constituted data recording medium, the 
reproduction history management circuit is embedded in the base 
material part of the data recording medium, whereby an 
encryption program, which is embedded, is not copied even when 
a physical stamp copy is performed, and a content is destroyed 
when it is to be taken out, resulting in higher-security 
copyright management. 

According to Claim 3 of the present invention, in the data 
recording medium as defined in Claim 1 or 2, the content is 
encrypted employing a key and is recorded on the data recording 
medium, and the reproduction history management circuit 
comprises: a storage part for storing a decryption key for 
decrypting the content recorded on the data recording medium; 
and a content output management part for restricting the number 
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of output times of the decrypted content in digital format when 
a content is reproduced from the data recording medium. 

According to the so-constituted data recording medium, a 
content is encrypted and recorded on the data recording medium, 
a decryption key for decrypting the content is held in the 
reproduction history management circuit, and the number of 
output times is restricted in digital format, whereby the 
content, which is encrypted, is not reproduced even when a 
physical stamp copy is performed, and copying for more than a 
prescribed number of times is impossible since the number of 
output times is restricted in case of reproduction, resulting 
in effective prevention of copyright piracy. 

According to Claim 4 of the present invention, in the data 
recording medium as defined in Claim 3 , the content recorded on 
the data recording medium is encrypted employing a key 
different in unit of the title or the arbitrary data size, and 
the content output management part has a decryption key for 
each unit of content encryption and restricts the number of 
output times of the content in digital format in unit of the 
title or the arbitrary data size. 

According to the so-constituted data recording medium, 
encryption is performed employing a key different in unit of 
the title or arbitrary data size of a content, and the number 
of output times in digital format is restricted in unit of the 
title or the arbitrary data size, resulting in firm copyright 
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of the content. 

According to Claim 5 of the present invention, in the data 
recording medium as defined in Claim 3 or 4, when the content 
is outputted in digital format, the content output management 
part updates and records its number of times, compares the 
number of times with the previously set number of restriction 
times, and decides not to output the content in digital format 
when the number of output times of the content in digital 
format exceeds the number of restriction times. 

According to the so-constituted data recording medium, the 
content output management part updates the number of digital 
output times and records the updated number of times, compares 
it with the previously set number of restriction times, and 
decides not to perform digital output according to its result, 
whereby the number of content duplication times in digital 
format can be restricted. 

According to Claim 6 of the present invention, in the data 
recording medium as defined in Claim 5, when the content is 
outputted in digital format simultaneously through plural paths, 
the content output management part has an output path number 
storage part for storing the number of paths, and adds the 
number of paths stored in the output path number storage part 
to count outputs of the content in digital format, when the 
number of output times of the content in digital format is 
counted. 
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According to the so-constituted data recording medium, 
when a content is outputted in digital format simultaneously 
through plural paths, the output path number storage part adds 
the number of paths for counting, whereby the number of 
duplication times can be restricted even in a reproduction 
apparatus provided with plural output interfaces in digital 
format . 

According to Claim 7 of the present invention, in the data 
recording medium as defined in any of Claims 1 to 6, the 
content output management part has personal information storage 
part for storing personal information for authenticating an 
owner of the data recording medium and compares externally 
inputted information with the personal information and permits 
reproduction of the content only when the comparison results in 
matching, at reproduction of the content. 

According to the so-constituted data recording medium, the 
content output management part has the personal information 
storage part and compares externally inputted information with 
personal information and permits reproduction only in case of 
their matching at content reproduction, thereby preventing 
unspecified people other than an owner of the data recording 
medium from reproducing the content without authorization. 

According to Claim 8 of the present invention, in the data 
recording medium as defined Claim 7, the content output 
management part has the-number-of-mismatch-times holding part 
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which compares the externally inputted information with the 
personal information and stores the number of mismatch times 
when the comparison successively results in mismatch, and 
suppresses reproduction of the content as well as informs the 
outside of the mismatch when the number of mismatch times 
exceeds a prescribed value. 

According to the so-constituted data recording medium, the 
content output management part has the-number-of-mismatch-times 
holding part and stores the number of mismatch times as a 
result of comparing externally inputted information with 
personal information and suppresses output of a content as well 
as inform the outside of the mismatch when the number of 
mismatch times exceeds a prescribed value, thereby preventing 
unspecified people other than an owner of the data recording 
medium from reproducing the content without authorization. 

According to Claim 9 of the present invention, in the data 
storing medium as defined in any of Claims 1 to 8, the content 
output management part further has a cipher processing part for 
performing an encryption processing according to a prescribed 
algorithm and performs authentication by a cipher between the 
data recording medium and the recording and reproduction 
apparatus, and suppresses reproduction of the content according 
to the authentication result. 

According to the so-constituted data recording medium, the 
cipher processing part is provided in the reproduction history 
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management circuit and authentication is performed between the 
reproduction history circuit and the data recording medium, 
thereby further enhancing security of a content. 

According to Claim 10 of the present invention, in a data 
management system for managing data employing a data recording 
medium for content recording or reproduction, the data 
recording medium has a reproduction history management circuit 
which records copyright protection information and manages 
reproduction and output of a content referring to the copyright 
protection information at content reproduction, the recording 
and reproduction apparatus has a medium management part which 
is connected to the reproduction history management circuit and 
manages writing or reading of data on the data recording medium, 
and when the content is reproduced, an encrypted content is 
decrypted by a decryption key held in the reproduction history 
management circuit to be reproduced, and when it is outputted 
in digital format, the number of output times is restricted by 
the reproduction history management circuit. 

According to the so-constituted data management system, 
writing or reading of data on the data recording medium is 
managed in the medium management part connected to the 
reproduction history management circuit and output in digital 
format is restricted by the reproduction history management 
circuit, thereby providing a system effectively protecting 
copyright of a content. 
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According to Claim 11 of the present invention, in the 
data management system as defined in Claim 10, the recording 
and reproduction apparatus has plural digital output openings, 
the reproduction history management circuit further records the 
number of paths when the content is outputted in digital format 
simultaneously through plural paths, and the number of paths is 
added by the reproduction history circuit to restrict the 
number of output times, when the content is outputted in 
digital format through the plural paths. 

In the so-constituted data management system, in a 
recording and reproduction apparatus having plural digital 
output openings, the reproduction history circuit records the 
number of plural paths and adds the number of paths to the 
number of output times in digital format output for restriction 
thereof, whereby the number of copy times can be restricted 
when a reproduced content is digitally copied simultaneously 
employing plural digital outputs . 

According to Claim 12 of the present invention, in the 
data management system as defined in Claim 10 or 11, the 
reproduction history management circuit further records 
personal information for recognizing an owner of the data 
recording medium, and when the content is reproduced, 
externally inputted information is compared with the personal 
information held by the reproduction history management circuit, 
and reproduction of the content is suppressed according to the 
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comparison result. 

According to the so-constituted data management system, 
personal information held by the reproduction history 
management circuit and externally inputted information are 
compared and reproduction of a content is suppressed according 
to its result, whereby an unjustified copy by one other than an 
owner of this content can be prevented, resulting in 
enhancement in content security. 

According to Claim 13 of the present invention, in the 
data management system as defined in Claim 12, the reproduction 
history management circuit further records the number of 
mismatch times of a result of the comparison, and when the 
content is reproduced, a previously set number of times is 
compared with the number of mismatch times held by the 
reproduction history circuit, thereby to suppress reproduction 
of the content. 

In the so-constituted data management system, the number 
of mismatch times held by the reproduction history management 
circuit is compared with a prescribed value and reproduction of 
a content is suppressed, whereby it is possible to warn an 
owner of the content of an unjustified access by one other than 
the owner, resulting in further enhancement in content security. 

According to Claim 14 of the present invention, in the 
data management system as defined in any of Claims 10 to 13, 
the reproduction history management circuit subjects a cipher 
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key to an encryption processing according to a prescribed 
algorithm, the medium management part subjects the cipher key 
to an encryption processing by the same algorithm as that of 
the reproduction history management circuit, and when the 
content is reproduced, authentication is performed between the 
data recording medium and the recording and reproduction 
apparatus employing the encryption processing by the 
reproduction history management circuit and the encryption 
processing of the medium management part, and whether or not 
the content can be decrypted is judged according to the 
authentication result. 

According to the so-constituted data management system, an 
authentication operation employing a cipher is performed 
between the recording and reproduction apparatus and the data 
recording medium, whereby reproduction of a content is 
permitted only in the environment enabling cipher communication, 
resulting in enhancement in content security. 

BRIEF DESCRIPTION OF DRAWINGS 

Figure 1 is a diagram illustrating a conceptual 
constitution of a disk medium as a data recording medium 
according to a first embodiment. 

Figure 2 is diagram illustrating the constitution of the 
disk medium which includes wiring in the first embodiment. 

Figure 3(a) is a diagram illustrating arrangement of a 
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recording and reproduction apparatus and the disk medium, which 
are used when a content recorded on the disk medium in the 
first embodiment is reproduced or a content is recorded. 

Figure 3(b) is a diagram illustrating a state where the 
disk medium, which is used when the content recorded on the 
disk medium in the first embodiment is reproduced or a content 
is recorded, is installed in a motor for rotating it. 

Figure 3(c) is a diagram illustrating the constitution of 
the disk medium in the first embodiment in more detail. 

Figure 4 is a block diagram schematically illustrating a 
constitution of a semiconductor tip in the first embodiment. 

Figure 5 is a block diagram illustrating an overall 
constitution of a data management system employing the data 
recording medium according to the first embodiment. 

Figure 6 is a diagram illustrating an overall operation 
when a content is encrypted and recorded employing the data 
management system according to the first embodiment. 

Figure 7 is a diagram illustrating a detailed process of 
Step Zl at recording of the data management system according to 
the first embodiment. 

Figure 8 is a diagram illustrating a detailed process of 
Step Z2 at recording of the data management system according to 
the first embodiment. 

Figure 9 is a diagram illustrating a detailed process of 
Step Z3 at recording of the data management system according to 
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the first embodiment. 

Figure 10 is a diagram for explaining an overall operation 
when the content recorded on the disk medium according to the 
first embodiment is reproduced by the recording and 
reproduction apparatus. 

Figure 11 is a diagram illustrating a detailed process of 
Step A2 when the content of the data management system 
according to the first embodiment is reproduced. 

Figure 13 is a diagram illustrating a detailed process of 
Step A3 when the content of the data management system 
according to the first embodiment is reproduced. 

Figure 14 is a diagram illustrating a detailed process of 
step A4 when the content of the data management system 
according to the first embodiment is reproduced. 

Figure 15 is a block diagram schematically illustrating a 
constitution of a semiconductor tip mounted on a disk medium as 
a data recording medium according to a second embodiment. 

Figure 16 is a block diagram illustrating an overall 
constitution of a data management system employing the data 
recording medium according to the second embodiment. 

Figure 17 is a diagram for explaining an overall operation 
when a content recorded on the disk medium according to the 
second embodiment is reproduced by a recording and reproduction 
apparatus . 

Figure 18 is a diagram illustrating a detailed process of 
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Step Bl when a content of the data management system according 
to the second embodiment is reproduced. 

Figure 19 is a diagram illustrating a detailed process of 
Step B2 when the content of the data management system 
according to the second embodiment is reproduced. 

Figure 2 0 is a diagram illustrating a detailed process of 
Step B3 when the content of the data management system 
according to the second embodiment is reproduced. 

Figure 21 is a diagram illustrating a detailed process of 
Step B4 when the content of the data management system 
according to the second embodiment is reproduced. 

Figure 22 is a block diagram schematically illustrating a 
constitution of a semiconductor tip mounted on a disk medium as 
a data recording medium according to a third embodiment. 

Figure 23 is an overall block diagram illustrating a 
procedure of registering personal information of a data 
management system employing the data recording medium according 
to the third embodiment. 

Figure 24 is a diagram illustrating a detailed process of 
Step CI as a procedure for registering personal information of 
the data management system according to the third embodiment. 

Figure 25 is a diagram illustrating a detailed process of 
Step C2 as a procedure for registering personal information of 
the data management system according to the third embodiment. 

Figure 26 is a diagram illustrating a detailed process of 
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Step C3 as a procedure for registering personal information of 
the data management system according to the third embodiment. 

Figure 2 7 is a diagram illustrating a detailed process of 
Step C4 as a procedure for registering personal information of 
the data management system according to the third embodiment. 

Figure 28 is an overall block diagram illustrating a 
procedure for confirming registered personal information of the 
data management system employing the data recording medium 
according to the third embodiment. 

Figure 29 is a diagram illustrating a detailed process of 
Step D3 as a procedure for confirming the registered personal 
information of the data management system according to the 
third embodiment. 

Figure 3 0 is a diagram illustrating a detailed process of 
Step D4 as a procedure for confirming the registered personal 
information of the data management system according to the 
third embodiment . 

Figure 31 is a diagram illustrating a detailed process of 
Step D4 as a procedure for confirming the registered personal 
information of the data management system according to the 
third embodiment. 

Figure 32 is a block diagram schematically illustrating a 
constitution of a semiconductor tip mounted on a disk medium as 
a data recording medium according to a fourth embodiment. 

Figure 33 is an overall block diagram illustrating a 
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procedure of recording unjustified access at confirmation of 
personal information of a data management system employing the 
data recording medium according to the fourth embodiment. 

Figure 34 is a diagram illustrating a detailed process of 
Step E4 as a procedure for recording unjustified access of the 
data management system according to the fourth embodiment. 

Figure 35 is a diagram illustrating a detailed process of 
Step E5 as a procedure for recording unjustified access of the 
data management system according to the fourth embodiment. 

Figure 3 6 is a block diagram schematically illustrating a 
constitution of a semiconductor tip mounted on a disk medium as 
a data recording medium according to a fifth embodiment. 

Figure 3 7 is a block diagram illustrating an overall 
constitution of a data management system employing the data 
recording medium according to the fifth embodiment. 

Figure 3 8 is a diagram for explaining an overall operation 
when authentication by a cipher algorithm when a content of the 
data management system according to the fifth embodiment is 
reproduced is performed. 

Figure 3 9 is a diagram illustrating a detailed process of 
Step Gl as a procedure for performing authentication of the 
data management system according to the fifth embodiment. 

Figure 40 is a diagram illustrating a detailed process of 
Step G2 as a procedure for performing authentication of the 
data management system according to the fifth embodiment. 
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Figure 41 is a diagram illustrating a detailed process of 
Step G3 as a procedure for performing authentication of the 
data management system according to the fifth embodiment. 

Figure 42 is a diagram illustrating a detailed process of 
Step G4 as a procedure for performing authentication of the 
data management system according to the fifth embodiment. 

Figure 43 is a diagram illustrating a detailed process of 
Step G5 as a procedure for performing authentication of the 
data management system according to the fifth embodiment. 

Figure 44 is a diagram for explaining CGMS (Copy 
Generation Management System) method as an example of a 
copyright protection method according to a conventional data 
management system. 

Figure 45 is a block diagram illustrating an overall 
constitution of a conventional data management system employing 
a data recording medium. 

BEST MODE TO EXECUTE THE INVENTION 

Hereinafter, a data recording medium and data management 
system according to the present invention will be described 
with reference to figures . 
(Embodiment 1) 

Figure 1 is a diagram illustrating a conceptual 
constitution of a disk medium 100 as a data recording medium 
according to a first embodiment of the present invention. In 
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figure 1, numeral 90 denotes a center hole, numeral 100 denotes 
a disk medium such as a DVD-RAM composed of polycarbon, numeral 
101 denotes a semiconductor tip (reproduction history 
management circuit) which includes a nonvolatile semiconductor 
tip or the like as a storage element, numeral 102 denotes a 
data area, numeral 103 denotes a clipping area for fixing the 
disk medium 100 on an after-mentioned rotation drive, and 
numeral 104 denotes a TOB (Table of contents) area where 
management information of the recorded data 102 on the disk 
medium 10 0 is recorded. 

When there may be plural semiconductor tips, for example, 
when there are two semiconductor tips, they may be arranged to 
be symmetrized with the center hole 90 in the center, thereby 
to achieve a balance, while there is one here. 

Figure 2 is a diagram exemplifying arrangement of wires 
provided in the disk medium for performing electrical signal 
connection with the semiconductor tip 101 mounted on the disk 
medium 100. In the figure, numeral 105 denotes wiring provided 
in the clipping area 103, which comprises a data line as a two- 
way signal line, a power line for supplying power, a clock line 
for supplying a clock when the semiconductor tip 101 is driven, 
and a GND line for supplying ground potential, from the outer 
circumference of the disk media 100, being arranged circularly 
in this order. 

While wiring is arranged on the surface of only one side 
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of the disk medium 100 in figure 2, it may be also arranged on 
both sides. 

Figures 3(a) and (b) are a partial top view and a cross 
sectional view when connection between a recording and 
reproduction apparatus 2 00 for performing 

recording/reproduction employing the disk medium 100 with the 
above-described constitution and the wiring 105 provided on the 
disk medium 100 is performed, and figure 3(c) is a cross 
sectional view illustrating the constitution of the disk medium 
100 in more detailed. In figures 3(a) and (b), numeral 106 
denotes a tray in which the disk medium 100 is arranged, 
numeral 107 denotes a clipping for fixing the disk medium 100, 
and numeral 108 denotes wiring provided on the contact face of 
the clipping 107 with the disk medium 100 and corresponding to 
the wiring 105 of the disk medium 100. That is,' the wiring 108 
comprises a data line, a power line, a clock line, and a GND 
line, from the outer circumference of the disk media 100, being 
arranged on a concentric circle. The data line of the wiring 
108 is connected to an after-mentioned medium management part. 

Numeral 109 denotes a spindle motor for rotating the disk 
medium 100 and numeral 208 denotes an optical pickup for 
reading a pit formed in the data area 102 of the disk medium 
100. 

The constitution of the disk medium 100 in more detail is 
as follows; the disk medium 100 comprises three layers, in 
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which numeral 131 denotes a base material layer and numeral 132 
denotes a recording layer in which contents are recorded. In 
the semiconductor tip 101, pins 133 corresponding to the 
respective wiring 105 provided in the clipping area 103 are 
attached, by which the semiconductor tip 101 and the wiring 105 
are connected so that power, a signal and the like are supplied 
to the semiconductor tip 101 as described above. 

Its manufacturing method is as follows; the semiconductor 
tip 105 to which the pins 133 are attached is embedded in the 
base material layer 131 having a concave portion in a part of 
the clipping area 103. Then, the recording layers 132 are 
applied to both sides and the wiring 105 corresponding to 
respective pins 133 is formed in a metal pattern on the surface 
from which the pins 133 are protruding by masking or the like. 
While the disk medium 100 comprises three layers here, it may 
also comprise two layers with the recording medium layer on 
only one side. 

With the above-described constitution, when the disk 
medium 100 is mounted on the tray 106, the tray 106 is housed 
into the recording and reproduction apparatus 200, the disk 
medium 100 is clamped down from above and beneath by the 
clipping 107 and the spindle motor 109 and is rotated by the 
spindle motor 109, the data area 102 of the disk medium 100 is 
accessed by the optical pickup 208, and data to be 
recorded/reproduced are communicated to an after-mentioned 
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cipher part. when the clipping 107 fixes the disk medium 100, 
the wiring arranged on the disk medium 10 0 comes in contact 
therewith, whereby the recording and reproduction apparatus 2 00 
and the semiconductor tip 101 embedded in the disk medium 100 
can perform data communication through the data lines. 
Next, an operation will be described. 

First, a recording operation will be described with 
reference to figures 4 to 9. 

When a content is encrypted to be recorded onto the disk 
medium 100, the semiconductor tip 101 has an I/O 100 as a two- 
way communication port, a CPU 111 (content output management 
part) which controls a data signal and a control signal and 
performs arithmetic operations, and a storage part 112 composed 
of a nonvolatile memory such as an EPROM and an EEPROM, which 
holds management information of recorded data, as shown in 
figure 4. 

Table 1 shows contents of the information held in the 
storage part 112, in which numeral 114 denotes a title, numeral 
115 denotes a decryption key part holding a decryption key in 
case of encryption in the unit of a title, and numeral 116 
denotes the-number-of -digital-output-restrict ion-times 
information as information for restricting the digitally 
outputted number of times of recorded data. 

Table 1 
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Decryption key 



Key A • • • 



The-number-of- 
digital-output- 
restriction-times 
information 



5 • • • 



Figure 5 is a block diagram of the recording and 
reproduction apparatus 2 00 for recording data onto the disk 
medium 100 or reproducing recorded data as shown in figure 3(a). 
In figure 5, numeral 2 01 denotes a signal processing part, 
numeral 2 02 denotes a medium management part for managing 
read/write of data onto the disk medium 100, numeral 2 03 
denotes a CPU which controls a data signal and control signal 
in the recording and reproduction apparatus 200, numeral 2 04 
denotes a digital interface for performing two-way data 
communication with an external recording and reproduction 
apparatus 212 as an external device connected to the recording 
and reproduction apparatus 200 by a connection cable 213, and 
numeral 2 05 denotes a D/A converter which converts digital data 
into analog data to output the data. 

Numeral 2 06 denotes a user setting part for a user to 
operate the recording and reproduction apparatus 200, numeral 
207 denotes a display part, which is a user interface too, for 
displaying an operation of the recording and reproduction 
apparatus 200, numeral 208 denotes an optical pickup 200 which 
records or reproduces data onto/from the disk medium 100, 
numeral 2 09 denotes an A/D converter which converts inputted 
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analog data into digital data, and numeral 211 denotes a random 
number part which generates a key to be employed in a cipher 
part 210. 

Here, a description will be given, provided that data of 
the-number-of -digital-output-restriction-times information 116 
of the semiconductor tip 101 are "0" when they are not set, 
while the data, when set, are counted down for each digital 
copy and the digital copy is not permitted when its value is 
"1", and when digital copy is permitted only once, the value is 
set to "2", for example. Further, recording and reproduction 
of a content on/from the disk media 100 is performed in the 
unit of a title. 

As shown in figure 6, Steps Zl and Z3 are performed in the 
recording and reproduction apparatus 200 and Step Z2 is 
performed in the semiconductor tip 101, and they are performed 
in the order of Steps Z1-Z3. 

That is, in step zl shown in figure 7, in Step A201, when 
disk medium 100 is arranged in the recording and reproduction 
apparatus 200 as shown in figure 3, the CPU 2 03 detects a title 
and arrangement of data recorded by a user, a vacant area, and 
the like on the disk medium 100, by the optical pickup 208 
accessing the TOB area 104 on the disk media 104, and displays 
the title on the display part 2 07. 

Next, in Step A2 02, a title of content data to be recorded 
by a user, the-number-of -digital-output-restriction-times 
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information, presence or absence of encryption of the content 
are set into the user setting part 2 06 (here, title: program A, 
the-number-of -digital-output-restriction-times information: 5, 
and encryption: presence) . 

In Step A203, the CPU 203 transfers the title and the- 
number-of -digital-output-restriction-times information to the 
medium management part 2 02 based on the information set in the 
user setting part 2 06, and a random number is generated from 
the random number part 211 to create an encryption key (key A). 
In Step A204, the program A as analog data is inputted to the 
A/D converter 2 09, where it is converted into digital data, is 
further transmitted to the signal processing part 201, where 
the program A is made into a record format, is transmitted to 
the cipher part 210, where the program A is encrypted employing 
the key A, and is transmitted to the optical pickup 208, and 
the encrypted program A is recorded in a vacant area of the 
recording data area 102 on the disk medium 100 and a title of 
the recorded data and arrangement of data in the disk medium 
100 are recorded in the TOB area 104 from the optical pickup 
208 by a control of the CPU 203. 

In Step A2 05, the medium management part 2 02 transmits a 
registration command, the title (program A), the-number-of- 
digital-output-restriction-times information (5), and the key A 
to the semiconductor tip 101 through the data lines. 

In figure 8 as a process in Step Z2, in Step A208, the 
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registration command, the title (program A), the-number-of- 
digital-output-restriction-times information (5), and the key A 
are received by the I/O 110. 

In Step A2 09, by the registration command received by the 
I/O 110, the CPU 111 transmits the received information in Step 
A208 to the storage part 112, where the information is stored 
as shown in Table 1. 

In Step A210, an end of communication is transmitted to 
the medium management part 202 after recording . 

In figure 9 as a process in Step Z3, the end of 
communication is received in step A213 and the operation for 
recording setting information onto the disk medium is ended. 

In this way, writing of a content onto the disk medium is 
performed . 

Next, an operation for reproducing the disk medium 100 on 
which a content is recorded being encrypted in the recording 
and reproduction apparatus 2 00 will be described with reference 
to figures 10 to 14. 

As shown in figure 10, Steps Al and A3 are performed in 
the recording and reproduction apparatus 2 00 and Steps A2 and 
A4 are performed in the semiconductor tip 101, and they are 
performed in the order of Steps A1-A4. 

First, in figure 11 as a process in Step Al , in Step A401, 
when the disk medium 100 is arranged in the recording and 
reproduction apparatus 200 as shown in figure 3, the CPU 203 
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detects a title and arrangement of data recorded by a user, a 
vacant area, and the like on the disk medium 100, by the 
optical pickup 2 08 accessing the TOB area 104 on the disk media 
100 , and displays the title on the display part 207. 

Next, in Step A4 02, presence or absence of output of a 
title to be reproduced by a user from the digital interface 2 04 
to the external recording and reproduction apparatus 212 
through the connection cable 213 is set into the CPU 203 
through the user setting part 206 (title: program A, digital 
output: presence). 

In Step A4 03, the CPU 203 transmits a start command 
indicating reproduction start, the title to be reproduced, and 
the information of presence or absence of digital output from 
the medium management part 202 to the semiconductor tip 101 
through the data lines 108 and 105. 

In figure 12 as a process in Step A2, the semiconductor 
tip 101 receives the information set in Step A402 at the I/O 
110 and the CPU 111 confirms the start command in Step A4 06, 
and presence or absence of digital output is confirmed in Step 
A407. When there is no digital output (no), the processing 
proceeds to Step A409, where a decryption key (key A) selected 
from the decryption key part 115 of the storage part 112 
according to the title (program A) is transmitted to the 
recording and reproduction apparatus 200. 

On the other hand, when there is digital output (yes) in 
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the step A4 07, the processing proceeds to Step A408, where the- 
number-of -digital-output-restriction-times information 116 of 
the semiconductor tip 101 is compared with "2", and when the- 
number-of-digital-output-restriction-times information 116 is 
equal to or larger than "2" (yes), the decryption key (key A) 
selected from the decryption key part 115 of the storage part 
112 according to the title (program A) is transmitted to the 
recording and reproduction apparatus 2 00 in Step A40 9. 

When the-number-of -digital-output-restrict ion-times 
information 116 is under "2" (no) in Step A408, a reproduction 
non-permission command for refusing transmission of the 
decryption key to reproduce a content is transmitted to the 
recording and reproduction apparatus 200 in Step A410, and 
communication is ended in Step A411. 

In figure 13 as a process in Step A3, the decryption key 
in Step A409 or the reproduction non-permission command in Step 
A410 is received in Step A414, and in case of reproduction non- 
permission command (yes) when the reproduction non-permission 
command is confirmed in Step A415, the processing proceeds to 
Step A416, where modification of the set information in Step 
A402 is prompted visually or aurally in the display part 207. 

Here, the set information in Step A402 cannot be modified 
after the end of Step A403, and thus the set information is 
erased and setting is reattempted from Step A4 02 in case of 
modification. Therefore, even when digital output is set to 
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"absence" in Step A4 02 and is modified to "presence" after the 
end of Step A402, unjustified digital output of a content which 
cannot be digitally outputted can be prevented by Step A408. 

On the other hand, in case of no reproduction non- 
permission command (no) in Step A415, the processing proceeds 
to Step A417, where presence or absence of digital output set 
in Step A402 is confirmed, and in case of "presence" (yes), the 
processing proceeds to Step A418, where a content of the title 
(program A) set in Step A402 is reproduced employing the 
decryption key (key A) received in Step A414 and decrypted data 
are outputted from the digital interface 2 04 in digital format, 
and a reproduction end is transmitted to the semiconductor tip 
101 when the reproduction is ended in Step A419. 

In Step A417, when presence of absence of digital output 
set in Step A402 is confirmed and it is "absence" (no), the 
processing proceeds to Step S420, where the content of the 
title (program A) set in Step A4 02 is decrypted employing the 
decryption key (key A) received in Step S414 and is reproduced 
in analog format from the D/A converter 205. 

in figure 14 as a process in Step A4 , when the 
semiconductor tip 101 receives a reproduction end at the I/O 
110 and the CPU 111 confirms the reproduction end in Step A423, 
the-number-of -digital-output-restriction-times information 116 
is updated to the number of times which is obtained by 
subtracting "1" from the-number-of -digital-output-restriction- 



32 



times information 116 of the storage part 112, "5 - 1 = 4", in 
Step A424, and it is recorded to end reproduction of the 
content. 

As described above, according to the first embodiment, the 
semiconductor tip 101 is provided in the disk medium 100 as a 
content recording medium and the information for restricting 
the number of digital output times is held and managed in the 
semiconductor tip 101, whereby the number of digital output 
times such as digital copy of a content can be restricted, the 
semiconductor tip 101 is embedded in the disk medium 100, 
whereby the semiconductor tip 101 is not copied even when a 
content storage area is physically copied by such a method as a 
stamp copy, and a content is encrypted so as to be decrypted 
only by a key stored in the semiconductor tip 101, whereby 
contents of the content are not taken out to the outside in a 
reproducible state. 

Further, the-number-of -digital-output-restriction-times 
information 116 is updated after a reproduction end of a 
content is confirmed in Step A423, whereby digital output of 
the content can be assured even when digital output is stopped 
in process of reproduction due to some trouble. 
(Embodiment 2) 

Next, a data recording medium and data management system 
according to a second embodiment of the present invention will 
be described. in the second embodiment, a description will be 
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given of a case where a reproduction operation being provided 
with plural digital data input/output openings is employed, 
while the first embodiment is described as a case of one 
interface. 

Figure 15 is a diagram illustrating a constitution of a 
semiconductor tip 101a, in which numeral 113 denotes a digital 
output number holding means (output path number storage part) 
for holding the number of digital outputs to the outside in 
case of digitally outputting to the outside of an apparatus for 
reproducing recorded data. Here, the same reference numerals 
as those shown in figure 4 denote the same or corresponding 
parts . 

Figure 16 is a block diagram of a recording and 
reproduction apparatus, which holds the operation in figure 
3(a) that enables reproduction of recorded data on a disk 
medium 100. In the figure, numeral 300 denotes a recording and 
reproduction apparatus, numeral 3 01 denotes a digital interface 
(A), numeral 302 denotes a digital interface (B) having plural 
digital output/input openings, numeral 2 02 denotes a hard disk 
(HDD) device (A), and numeral 304 denotes a hard disk (HDD) 
device (B). The same reference numerals as those shown in 
figure 5 denote the same or corresponding parts. 

The so-constituted recording and reproduction apparatus 
300 will be described with reference to figures 17 to 21. 

To reproduce a content on the disk medium 100, Steps Bl 
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and B3 are performed in the recording and reproduction 
apparatus 3 00 and Steps B2 and B4 are performed in the 
semiconductor tip 101a, and they are performed in the order of 
Steps B1-B4, as shown in figure 17. 

In figure 18 as a process in Step Bl, in Step B601, when 
the disk medium 100 is arranged in the recording and 
reproduction apparatus 3 00 as in figure 3, the CPU 2 03 confirms 
a title and arrangement of data recorded by a user, a vacant 
area, and the like on the disk medium 100, by the optical 
pickup 208 accessing the TOB area 104, and displays the title 
on the display part 2 07. 

Next, in Step B602, a title to be reproduced by a user is 
selected in the user setting part 206 when it is digitally 
outputted from the digital interfaces (A) 301 and (B) 302 to 
the external recording and reproduction apparatus 212 and the 
HDD devices (A) 303 and (B) 304 through the connection cable 
213, and the number of digital outputs is set in the CPU 203 
through the user setting part 206 (title: program A, digital 
output: 3), and a start command indicating reproduction start, 
the title to be reproduced, and the number of digital outputs 
are transmitted to the semiconductor tip 101a in Step B603. 
Here, when there is no digital output in Step B602, a 
description will be given as "0". 

In figure 19 as a process in Step B2 , the information set 
in Step B602 is received and the start command is confirmed in 
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step B6 06, and the digital output number is compared with "0", 
so that presence or absence of digital output is detected in 
Step B607. In case of digital output number being "0" (no) in 
Step B607, digital output is considered to be "absence" and the 
processing proceeds to Step B614, where a decryption key (key 
A) selected from the decryption key part 115 according to the 
title is transmitted to the recording and reproduction 
apparatus 3 00. 

On the other hand, in case of digital output number being 
other than "0" (yes) in Step B607, digital output is considered 
to be "presence" and the processing proceeds to Step B608, 
where the-number-of -digital-output-restriction-times 
information 116 is compared with "2" , so that it is detected 
whether digital output is possible. 

When the-number-of -digital-output-restriction-times 
information 116 is under "2" (no) in Step B608, the processing 
proceeds to Step B611, where a reproduction non-permission 
command for refusing transmission of the decryption key to 
reproduce a content is transmitted to the semiconductor tip 
101a. On the other hand, when the-number-of-digital-output- 
restrict ion-times information 116 is equal to or larger than 
"2" (yes) in Step B608, Step B6 0 9 is executed. 

In Step B6 09, where the digital output number is compared 
with "2" , when the digital output number is under "2" , that is, 
"1" or less (no), the digital output number is set in the 
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digital output number holding part 113 in Step B613, and the 
decryption key (key A) selected from the decryption key part 
115 according to the title (program A) is transmitted to the 
recording and reproduction apparatus 3 00 in Step B614. 

When the digital output number is over "2" (yes) in Step 
B609, the processing proceeds to Step B610, where the result of 
subtracting the digital output number from the-number-of- 
digital-output-restriction-times information 116 is compared 
with "1" , and when the result of subtracting the digital output 
number from the-number-of -digital-output-restriction-times 
information 116 is under "1" (yes), a reproduction non- 
permission command for refusing transmission of the decryption 
key to reproduce a content is transmitted to the semiconductor 
tip 101a in Step B611, and communication is ended in Step B612. 

On the other hand, when the result of subtracting the 
digital output number from the-number-of-digital-output- 
restriction-times information 116 is equal to or larger than 
"1" (no) in Step B610, the processing proceeds to Step B613, 
where the digital output number is set in the digital output 
number holding means 113 (3), and the decryption key (key A) 
selected from the decryption key 115 according to the title 
(program A) is transmitted to the recording and reproduction 
apparatus 300 in Step B614. 

In figure 20 as a process in Step B3 , the reproduction 
non-permission command in Step B611 or the decryption key in 
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Step B614 is received in Step B617, whether what is received is 
the reproduction non-permission command or not is confirmed in 
Step B618, and in case of this being the reproduction non- 
permission command (yes), the processing proceeds to Step B619, 
where modification of the set information in Step A6 02 is 
prompted visually or aurally in the display part 207. 

On the other hand, when what is received is judged not to 
be the reproduction non-permission command (no) in Step B618, 
the processing proceeds to Step B62 0, where the digital output 
number is compared with "0", so that presence or absence of 
digital output is detected. 

When the digital output number is "0" (no) in Step B620, 
the digital output is considered to be "absence", and a content 
of the title (program A) set in Step B602 is reproduced 
employing the decryption key (key A) received in Step B617 and 
is outputted in only analog format from the D/A converter 205 
in Step B623. 

On the other hand, when the digital output number is other 
than "0" (yes) in Step B620, the digital output number is 
considered to be "presence", and a content of the title 
(program A) set in Step B602 is reproduced employing the 
decryption key (key A) received in Step B617 and is outputted 
from the digital interface (A) 301 or the digital interface (B) 
302 in digital format, and a reproduction end is transmitted to 
the semiconductor tip 101a when the reproduction is ended in 
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Step B622. 

In figure 21 as a process in Step B4, confirmation of a 
reproduction end is performed in Step B62 6, and in case of 
reproduction end, the processing proceeds to Step B627, where 
the digital output number holding means 113 (3) is subtracted 
from the-number-of-digital-output-restriction-times information 
116 to update the-number-of-digital-output-restriction-times 
information 116 and the updated number of times is stored, and 
reproduction of a content is ended. 

As described above, according to the second embodiment, in 
the recording and reproduction apparatus provided with plural 
digital output openings, a function of holding the number of 
digital outputs is provided in the semiconductor tip 101a in 
the disk medium 100, and the value of the digital output number 
holding means 113 is subtracted from the-number-of -digital- 
output-restriction-times information 116 when a digital copy is 
ended, whereby it is possible to restrict the number of copy 
times when a reproduced content is digitally copied 
simultaneously employing plural digital outputs. 
(Embodiment 3) 

Next, a data recording medium and data management system 
according to a third embodiment of the present invention will 
be described. In the third embodiment, the semiconductor tip 
101b is provided with a function of permitting reproduction of 
a disk medium by performing user authentication employing 
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user's personal information (password) in addition to the 
construction of the first and second embodiments. Here, a 
description will be given exemplifying a case where the 
function of the third embodiment is applied to the first 
embodiment. 

Figure 22 is a block diagram illustrating a constitution 
of the semiconductor tip 101b in the third embodiment, in which 
numeral 117 denotes a personal information holding part 
(personal information storage part) for holding a password 
aimed at user authentication. Other parts are the same as 
those shown in figure 4, and their descriptions will be omitted 
here. 

An operation of the so-constituted third embodiment will 
be described with reference to figures 23 to 27. Here, a 
description will be given, provided that personal information 
is not registered when the value of the personal information 
holding part 117 is "0", the disk medium 100 is arranged in an 
apparatus to record or reproduce, the CPU 111b of the 
semiconductor tip 101b confirms the personal information 
holding part 117 at the point of time when power is applied, 
and an access to the storage part 112 is restricted unless 
personal information inputted from the recording and 
reproduction apparatus 200 matches the personal information, 
when it is set (to other than 0). 

First, an operation for registering personal information 
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for authenticating a user in the semiconductor tip 101b by the 
recording and reproduction apparatus 2 00 will be described. 

As shown in figure 23, Steps CI and C3 are performed in 
the recording and reproduction apparatus 2 00 and Steps C2 and 
C4 are performed in the semiconductor tip 101b, and they are 
performed in the order of Steps C1-C4. 

In figure 24 as a process in Step CI, by arranging the 
disk medium 100 in the recording and reproduction apparatus 200, 
the CPU 2 03 transmits personal information confirmation command 
for confirming presence or absence of registration of personal 
information in the disk medium 100 in Step C801. 

Next, in figure 25 as a process in Step C2, the personal 
information confirmation command is received in Step C804, the 
CPU 111b compares the personal information holding part 117 
with "0" in order to confirm presence or absence of personal 
information according to the personal information confirmation 
command in Step C8 05, and in case of the personal information 
holding part 117 being "0" (no), which results in "no personal 
information", the processing proceeds to Step C807, where a no- 
personal-information command is transmitted. On the other hand, 
when the personal information holding part 117 is not "0" (yes) 
in Step C805, which results in "personal information", the 
processing proceeds to Step C806, where a personal information 
command is transmitted. 

In figure 26 as a process in Step C3 , the personal 



41 



information command or the no-personal-information command is 
received in Step C811, the CPU 203 confirms whether or not it 
is no-personal-information command in Step C812, and in case of 
no-personal-information command detected (yes), the processing 
proceeds to Step C813, where a reproduction operation is 
performed or a registration command for registering personal 
information and the personal information to be registered are 
inputted from the user setting part 206 and are transmitted to 
the semiconductor tip 101b. An operation when other than the 
no-personal-information command is detected (no) in Step C812 
will be described in an after-mentioned user authentication 
operation. 

In figure 27 as a process in Step C4 , the registration 
command and the personal information to be registered are 
received in Step C817, and the CPU 111b stores the personal 
information in the personal information holding part 117 based 
on the registration command in Step C818. 

Next, an operation of the recording and reproduction 
apparatus 2 00, when personal information for performing user 
authentication is registered in the semiconductor tip 101b, 
will be described with reference to figures 28 to 31. 

As shown in figure 28, Steps CI, D3, and D5 are performed 
in the recording and reproduction apparatus 2 00 and Steps C2 
and D4 are performed in the semiconductor tip 101b, and they 
are performed in the order of Steps C1-D5. Here, the same step 
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names as those in figures 23 to 2 7 denote the same processes, 
and their descriptions will be omitted. 

In figure 2 9 as a process in Step D3 , personal information 
command or no-personal-information command is received in Step 
D1011, the CPU 203 confirms whether or not it is no-personal- 
information command in Step D1012, and in case of other than 
no-personal-information command (no), input of personal 
information to the display part 207 is promoted in Step D1014, 
and a personal information command as a confirmation command of 
the personal information and inputted personal information are 
transmitted to the semiconductor tip 101b in Step D1015, when 
the personal information is inputted. 

In figure 30 as a process in Step D4 , the personal 
information command and the inputted personal information are 
received in Step D1018, the CPU 111b compares the personal 
information in the personal information holding part 117 with 
the inputted personal information based on the personal 
information command in Step D1019, and in case of these 
matching (yes), the processing proceeds to Step D1020, where a 
continuation command informing establishment of user 
authentication is transmitted, while in case of mismatch (no), 
the processing proceeds to Step D1021, where a communication 
end is transmitted. 

Here, user authentication is established in case of (yes) 
in Step D1019 and the CPU 111b is subsequently operated to 
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access the storage part 112, thereby enabling a recording or 
reproduction operation onto the disk medium 100. 

In figure 31 as a process in Step D5, the continuation 
command or the communication end is received in Step D1024, the 
CPU 203 confirms whether or not it is continuation command in 
Step D1025, and when it is judged to be a continuation command 
(yes) here, the processing proceeds to Step D1026, where a 
recording or reproduction operation onto the disk medium 100, 
issue of an erasing command as a command for erasing 
information of the personal information holding part 117, or 
transmission of a registration command for modifying registered 
personal information or the like are possible. 

On the other hand, when it is judged not to be the 
continuation command (no) in Step D1025, the processing 
proceeds to Step D102 7, where communication is ended. 

Further, it is also possible that plural pieces of 
personal information are provided in the personal information 
holding part 117, a user selects his/her personal information 
of the personal information holding part 117, and the above- 
described operation is performed plural times. 

in addition, it is also possible that user authentication 
information is set in unit of the title registered in the 
storage part 112 of the semiconductor tip 101b and reproduction 
is made possible only when user authentication is established. 
As described above, according to the third embodiment, 



user's personal information (password) is stored in the 
semiconductor tip 101b in the disk medium 100 and 
authentication is performed at medium reproduction, so that 
user authentication is possible on the side of disk medium, 
whereby such actions as an unjustified copy of the disk medium 
100 by a third person can be prevented, resulting in firm 
% security of a content. 
..: (Embodiment 4) 

Next, a data recording medium and data management system 

0 according to a fourth embodiment of the present invention will 
be described. The fourth embodiment is provided with a 

1 function of detecting an unjustified operation with respect to 
user authentication when personal information is set in a 

; personal information holding part of a semiconductor tip in 
addition to the construction of the third embodiment. That is, 
figure 32 is a block diagram illustrating a constitution of a 
semiconductor tip 101c in the fourth embodiment, in which 
numeral 118 denotes the-number-of -un justification-times holding 
part (the-number-of -mismatch-times holding part) for holding 
the number of mismatch times of confirmation of personal 
information (password). Other parts are the same as those 
shown in figure 22, and their descriptions will be omitted here. 

Here, a description will be given, provided that in the- 
number-of -un justification-times holding part 118, arbitrary 
value other than "0" is set, which value is set by clearing a 
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stored value, and an unjustified access is considered to be 
detected when "0" is held in the-number-of-un justification- 
times holding part 118. 

Hereinafter, a description will be given with reference to 
figures 33 to 35 mainly of an operation for detecting an 
unjustified access for analyzing personal information or the 
like, when the personal information for user authentication is 
registered in the semiconductor tip 101c. 

As shown in figure 33, Steps CI, D3, and E5 are performed 
in the recording and reproduction apparatus 200 and Steps C2 
and E4 are performed in the semiconductor tip 101c, and they 
are performed in the order of Steps C1-E5. Here, the same step 
names as those in figure 2 8 denote the same processes, and 
their descriptions will be omitted. 

First, in figure 34 as a process in Step E4, personal 
information command and input personal information are received 
in Step E1101. 

Next, the CPU 111c compares memory contents of the-number- 
of-un justification-times holding part 118 with "0" in Step 
E1102, and in case of the memory contents of the-number-of- 
un justification-times holding part 118 being "0" (yes), the 
processing proceeds to Step El 103, where an unjustified action 
is considered to exist and an unjustified access command is 
transmitted to the recording and reproduction apparatus 200. 

On the other hand, when the memory contents of the-number- 
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of-un justification-times holding part 118 are other than "0" 
(no) in Step E1102, the processing proceeds to Step E1104, 
where the CPU 111c compares the personal information holding 
part 117 and the input personal information based on the 
personal information command, and in case of matching as a 
result (yes), the processing proceeds to Step E1105, where the- 
number-of-un justification-times holding part 118 is cleared and 
a prescribed value other than "0" is set therein, and a 
continuation command informing establishment of user 
authentication is transmitted in Step El 106. On the other hand, 
in case of mismatch (no) in Step E1104, the processing proceeds 
to Step E1107, where the result obtained by subtracting "1" 
from a value stored in the-number-of-un justification-times 
holding part 118 is held as the-number-of-un justification-times 
holding part 118, and a communication end is transmitted to the 
recording and reproduction apparatus 200 in Step E1108- 

When user authentication is established before the value 
set in the-number-of-un justification-times holding part 118 is 
"0" by executing Step E1105, the-number-of-un justification- 
times holding part 118 is cleared and returned to the 
prescribed value. Therefore, even when the number of 

un justification times is recorded due to user's incorrect input, 
correct input is performed again and the number of 
unjustif ication times due to incorrect input is counted, 
thereby preventing access onto the disk medium from abruptly 
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becoming impossible by accumulation of the number of 
un justification times due to incorrect input. Further, when a 
person other than a user successively inputs information which 
is not stored in the personal information holding part 117 in 
order to perform unjustified user authentication, the value of 
the-number-of-un justification-times holding part 118 

approximates "0", and existence of unjustified access can be 
detected when the-number-of-un justification-times holding part 
118 is "0". 

In figure 35 as a process in Step E5, one of an 
unjustified access command, a continuation command, and a 
communication end is received in Step Ellll, the CPU 203 
confirms whether the received information is unjustified access 
command or not in Step E1112, and in case of unjustified access 
command (yes), the processing proceeds to Step E1113, where 
existence of an unjustified action is displayed visually or 
aurally in the display part 2 07. 

On the other hand, when the CPU 230 confirms information 
other than the unjustified access command (no) in Step E1112, 
the processing proceeds to Step E1114, where the CPU 230 
confirms whether the information is continuation command or not, 
and in case of continuation command (yes), the processing 
proceeds to Step El 115, where a recording or reproduction 
operation onto the disk medium 100, issue of an erasing command 
as a command for erasing information of the personal 
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information holding part 117, transmission of a registration 
command for modifying registered personal information, or the 
like are possible. 

When the CPU 203 judges it is not the continuation command 
(no) in Step E1114, the processing proceeds to Step E1116, 
where communication is ended. 

As described above, according to the fourth embodiment, by 
a function of storing the number of unjustified access times 
being provided with the semiconductor tip 101c of the disk 
medium 100, it is possible, for example, to record and hold on 
the side of the disk medium 100 that a third person performed 
an unjustified access to the disk medium 100 viciously, whereby 
it is possible to warn a regular owner of the disk medium 100 
of an unjustified access. 

Further, the reproduction apparatus may stop an 
unjustified action by intimidating with a loud sound or the 
like when an unjustified access is detected. 
( Embodiment 5 ) 

Next, a data recording medium and data management system 
according to a fifth embodiment of the present invention will 
be described. In the fifth embodiment, an authenticating 
operation employing a cipher is performed in the above- 
described respective embodiments. Here, a description will be 
given exemplifying a case where this embodiment is applied in 
the first embodiment. 



Figure 3 6 is a block diagram illustrating a constitution 
of a semiconductor tip 10 Id in the fifth embodiment, in which 
numeral 119 denotes a cipher part of the recoding and 
reproduction apparatus 200 , which has the same cipher algorithm 
as that of the cipher part 210, numeral 12 0 denotes a random 
number part which generates a random number, and numeral 121 
denotes a key box part as a set of key arrangement employed in 
the cipher part 119. Other parts are the same as those shown in 
figure 4, and their descriptions will be omitted here. Figure 
37 is a block diagram of a recording and reproduction apparatus 
4 00 in the fifth embodiment, in which numeral 214 denotes a key 
box part having the same function as that of the key box part 
121 included in the semiconductor tip 10 Id mounted on the disk 
medium 100. The same reference numerals as those shown in 
figure 5 denote the same or corresponding parts . 

Table 2 shows information held in the key box part 121 and 
the key box part 214, in which numeral 17 00 denotes a key code 
for selecting a key and numeral 1701 denotes a key selected 
according to the key code 1700. 



Table 2 




/7or 



Key code 



Key 



Key code 1 
Key code 2 



Key KC1 
Key KC2 



An authenticating operation in the so-constituted 
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semiconductor tip lOld in the disk medium 100 and recording and 
reproduction apparatus 4 00 will be described with reference to 
figures 3 8 to 41. As shown in figure 38, Steps Gl , G3 , and G5 
are performed in the recording and reproduction apparatus 4 00 
and Steps G2 and G4 are performed in the semiconductor tip 10 Id, 
and they are performed in the order of Steps G1-G5. 

Data encryption and decryption are subsequently described 
as follows. 

Function name = E/D (A, B) 
Provided that E/D = E: encryption and D = decryption, A denotes 
a key in encryption or decryption and B denotes a plain text or 
a cipher text. 

To generate a cipher text C by encrypting the plain text B 
by the key A, for example, 

C = E (A, B) . 
Decryption is 

B = D (A, C) . 

In figure 39 as a process in Step Gl , an authentication 
start command is transmitted to the semiconductor tip 10 Id in 
Step G1801. 

In figure 40 as a process in Step G2, the authentication 
start command is received in Step G1804, the CPU llld generates 
a random number, RX, from the random number part 120 based on 
the authentication start command in Step G1805, "key code 1" is 
generated employing a list of the random number RX and "key 
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KC1" is selected from the "key code 1" at the key box part 121 
in Step G1806, the random number RX is subjected to encryption: 
El = E (KC1, RX) with the "key KC1" as a key at the cipher part 
119 so as to create El in Step G1807, and the El and the "key 
code 1" are transmitted to the recording and reproduction 
apparatus 400 in step G1808. 

In figure 41 as a process in Step G3 , the El and the "key 
code 1" are received in Step G1811, the CPU 203 selects the 
"key KC1" corresponding to the "key code 1" at the key box part 
214 in Step G1812, and the El is subjected to decryption: Dl = 
D (KC1, El) with the "key KC1" as a key at the cipher part 210 
so as to create Dl in Step G1813. 

Next, a random number is generated at the random number 
part 211 and "key code 2", which is different from the "key 
code 1", is generated employing a list of the random number in 
Step G1814, a key is selected as "key KC2" from the key box 
part 214 by the "key code 2" in Step G1815, the Dl is subjected 
to encryption: E2 = (KC2, Dl) with the "key KC2 " as a key at 
the cipher part 210 so as to create E2 in Step G1816, the E2 
and the "key code 2" are transmitted to the semiconductor tip 
lOld in Step G1817, and the Dl, the "key KC1", and the "key 
KC2" are subjected to exclusive OR: KI1 = Dl . KC1 - KC2 {. is 
a mark denoting exclusive OR), so as to create "KIl" as a 
transmission key employed as a key for encrypting and 
transmitting data required for recording or reproduction in 
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Step G1818. 

In figure 42 as a process in Step G4, the E2 and the "key- 
code 2" are received in Step G1821, the CPU llld selects the 
"key KC2" corresponding to the "key code 2" at the key box part 
121 in step G1822, the E2 is subjected to decryption: D2 = (KC2, 
E2) with the "key KC2" as a key at the cipher part 119 so as to 
create D2 in Step G1823 r the random number RX and the D2 are 
compared in Step G1824, and in case where the random number RX 
mismatches the D2 (no), the processing proceeds to Step G1827, 
where a communication end is transmitted, and transmission is 
ended in Step G182 8. 

On the other hand, in case where the random number RX 
matches the D2 in Step G1824 (yes), the semiconductor tip lOld 
authenticates the recording and reproduction apparatus 400, and 
the RX, the "key KC1", and the "key KC2 " are subjected to 
exclusive OR: KI2 = RX . KC1 . KC2 , so as to create "KI2" as a 
transmission key employed as a key for encrypting and 
transmitting data required for recording or reproduction in 
step G1825, and a continuation command is transmitted in Step 
G1826. 

In figure 43 as a process in Step G5 , the continuation 
command or the transmission end is received in Step G1531, it 
is confirmed whether the received information is a continuation 
command or not in Step G1532, and in case where this is judged 
not to be a continuation command (no), the processing proceeds 
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to Step G1534, where communication is ended, while in case 
where this is judged to be a continuation command, the 
processing proceeds to Step G1533, where a reproduction 
operation is performed. 

As described above, according to the fifth embodiment, a 
cipher processing function is provided with the semiconductor 
tip 10 Id of the disk medium 100 and authentication is performed 
1 employing a cipher, whereby reproduction of the disk medium 100 
I is permitted only in the environment enabling cipher 
I communication, resulting in further enhancement in content 
I security. 

* Further, a transmission key for encrypting and 

I transmitting data required for a recording or reproduction 
f operation is generated differently for each authentication, 
employing data in communication process including random number 
data, whereby a high-security key can be created. 

While in the first embodiment, the semiconductor tip 101 
which the pins 133 is connected to is embedded in the base 
material part 131 with a concave portion and both sides thereof 
are applied with the recording layers 132, thereby to 
manufacture the disk medium 100, it is also possible that only 
a part of the clipping area 103 having the semiconductor tip 
101 and the wiring 105 is created separately and is embedded in 
the disk medium 100, which has the outside of the clipping area 
103 created conventionally. 
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Further, while in the first embodiment, the wiring 105 is 
employed in the clipping area 103 so as to supply power or a 
signal to the semiconductor tip 101 mounted on the disk medium 
100, it is also possible that a solar battery panel is mounted 
on the clipping area 103 to supply power to the semiconductor 
tip 101 as well as to irradiate a semiconductor laser to a 
specified position of the solar battery panel, thereby 
transferring a signal. 

Further, while a password is held in the disk medium 100 
as personal information so as to be confirmed in the third 
embodiment, or a cipher processing is employed to perform 
authentication between the disk medium 100 and the reproduction 
apparatus 400 in the fifth embodiment, it is also possible that 
an algorithm for authentication is held in a medium such as an 
IC card, which is employed instead of a key at content 
reproduction, thereby to prevent unjustified use. 

APPLICABILITY IN INDUSTRY 

As described above, a data recording medium and data 
management system according to the present invention can enhance 
security in copyright management in a disk medium and is highly 
available as one effectively preventing copyright piracy. 
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CLAIMS 

1. A data recording medium for content recording or 
reproduction including: 

a reproduction history management circuit which records 
copyright protection information and manages reproduction and 
output of a content referring to the copyright protection 
information at content reproduction. 

2. The data recording medium as defined in Claim 1, 

the data recording medium is made of a recording layer for 
recording a content and a base material layer, wherein 

the reproduction history management circuit is embedded in 
a part of the base material layer in a clipping area in the 
data recording medium, and 

the clipping area is an area where the data recording 
medium is fixed with respect to a rotation drive for rotating 
the data recording medium. 

3. The data recording medium as defined in Claim 1 or 2, 
wherein 

the content is encrypted employing a key and is recorded 
on the data recording medium, and 

the reproduction history management circuit comprises: a 
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storage part for storing a decryption key for decrypting the 
content recorded on the data recording medium; and 

a content output management part for restricting the 
number of output times of the decrypted content in digital 
format when a content is reproduced from the data recording 
medium. 

4. The data recording medium as defined in Claim 3, wherein 
the content recorded on the data recording medium is 

encrypted employing a key different in unit of the title or the 
arbitrary data size, and 

the content output management part has a decryption key 
for each unit of content encryption and restricts the number of 
output times of the content in digital format in unit of the 
title or the arbitrary data size. 

5. The data recording medium as defined in Claim 3 or 4 , 
wherein 

when the content is outputted in digital format, the 
content output management part updates and records its number 
of times, compares the number of times with the previously set 
number of restriction times, and decides not to output the 
content in digital format when the number of output times of 
the content in digital format exceeds the number of restriction 
times . 
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6. The data recording medium as defined in Claim 5, wherein 
when the content is outputted in digital format 

simultaneously through plural paths, the content output 
management part has an output path number storage part for 
storing the number of paths, and adds the number of paths 
stored in the output path number storage part to count outputs 
of the content in digital format, when the number of output 
times of the content in digital format is counted. 

7 . The data recording medium as defined in any of Claims 1 to 
6, wherein 

the content output management part has personal 
information storage part for storing personal information for 
authenticating an owner of the data recording medium and 
compares externally inputted information with the personal 
information and permits reproduction of the content only when 
the comparison results in matching, at reproduction of the 
content . 

8. The data recording medium as defined Claim 7, wherein 
the content output management part has the-number-of- 

mismatch-times holding part which compares the externally 
inputted information with the personal information and stores 
the number of mismatch times when the comparison successively 
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results in mismatch, and suppresses reproduction of the content 
as well as informs the outside of the mismatch when the number 
of mismatch times exceeds a prescribed value. 

9 . The data recording medium as defined in any of Claims 1 to 
8, wherein 

the content output management part further has a cipher 
processing part for performing an encryption processing 
according to a prescribed algorithm and performs authentication 
by a cipher between the data recording medium and the recording 
and reproduction apparatus, and suppresses reproduction of the 
content according to the authentication result. 

10. A data management system for managing data employing a 
data recording medium for content recording or reproduction, 
wherein 

the data recording medium has a reproduction history 
management circuit which records copyright protection 
information and manages reproduction and output of a content 
referring to the copyright protection information at content 
reproduction , 

the recording and reproduction apparatus has a medium 
management part which is connected to the reproduction history 
management circuit and manages writing or reading of data on 
the data recording medium, and 
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when the content is reproduced, an encrypted content is 
decrypted by a decryption key held in the reproduction history 
management circuit to be reproduced, and when it is outputted 
in digital format, the number of output times is restricted by 
the reproduction history management circuit. 

11. The data management system as defined in Claim 10, wherein 
the recording and reproduction apparatus has plural 

digital output openings, 

the reproduction history management circuit further 
records the number of paths when the content is outputted in 
digital format simultaneously through plural paths, and 

the number of paths is added by the reproduction history 
circuit to restrict the number of output times , when the 
content is outputted in digital format through the plural paths . 

12. The data management system as defined in Claim 10 or 11, 
wherein 

the reproduction history management circuit further 
records personal information for recognizing an owner of the 
data recording medium, and 

when the content is reproduced, externally inputted 
information is compared with the personal information held by 
the reproduction history management circuit, and reproduction 
of the content is suppressed according to the comparison result. 
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13. The data management system as defined in Claim 12, wherein 
the reproduction history management circuit further 

records the number of mismatch times of a result of the 
comparison, and 

when the content is reproduced, a previously set number of 
times is compared with the number of mismatch times held by the 
reproduction history management circuit, thereby to suppress 
reproduction of the content. 

14. The data management system as defined in any of Claims 10 
to 13, wherein 

the reproduction history management circuit subjects a 
cipher key to an encryption processing according to a 
prescribed algorithm, 

the medium management part subjects the cipher key to an 
encryption processing by the same algorithm as that of the 
reproduction history management circuit, and 

when the content is reproduced, authentication is 
performed between the data recording medium and the recording 
and reproduction apparatus employing the encryption processing 
by the reproduction history management circuit and the 
encryption processing of the medium management part, and 
whether or not the content can be decrypted is judged according 
to the authentication result. 
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